Add more Kibana context to E&A Languages page #2859

florent-leborgne · 2025-09-08T16:57:03Z

This PR:

Adds more explicit mentions of Kibana in the Query languages section
Adds more links to the main Query languages page to orientate users to either the full reference docs for each language, or for the Kibana-specific page that covers (or should cover) where users can make use of each language in Kibana. This has some follow up work with issues linked to Reorient the E&A ESQL/query languages overview pages #2697
Catches a duplicate ID in the Console page, flagged in [Community]: Anchor link name conflict on #2845

Closes: #2697
Closes: #2845

github-actions · 2025-09-08T17:12:31Z

🔍 Preview links for changed docs

benironside

LGTM

benironside · 2025-09-08T22:32:29Z

explore-analyze/query-filter/languages.md

-:::
-
+| **Query DSL** | {{es}}'s primary, most powerful and flexible JSON-style language for complex queries.<br><br>[Full language reference](elasticsearch://reference/query-languages/querydsl.md)| Full-text search, semantic search, keyword search, filtering, aggregations, and more. <br><br>[Query DSL in Kibana](languages/querydsl.md) |[`_search`](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-search) |
+| **{{esql}}** | Introduced in **8.11**, the Elasticsearch Query Language ({{esql}}) is a piped query language for filtering, transforming, and analyzing data.<br><br>[Full language reference](elasticsearch://reference/query-languages/esql.md) | Initially tailored towards working with time series data like logs and metrics. You can use {{esql}} in multiple {{kib}} applications for querying, visualizing, and analyzing data.<br><br>[{{esql}} in Kibana](languages/esql-kibana.md) | [`_query`](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-esql) |


Maybe this is outside the scope, but what does "Initially tailored towards working with time series data like logs and metrics." mean? Is it saying that's the primary usecase?

good catch, that's dated, I suggested deleting that phrase :)

benironside · 2025-09-08T22:34:09Z

explore-analyze/query-filter.md

 # Querying and filtering [search-analyze]

-You can use {{es}} as a basic document store to retrieve documents and their metadata. However, the real power of {{es}} comes from its advanced search and analytics capabilities.
+{{es}} is not only great at storing and retrieving documents and their metadata, it also offers powerful querying and analytics capabilities that let you search, filter, and analyze your data at scale. These same capabilities are available in {{kib}} applications to facilitate interactive data exploration and visualization.


leemthompo

Looks good, my main concern is that the ## Querying section now suffers from a bit of focus mismatch between ES and Kib, but as mentioned in my comment maybe that's out of scope here :)

Suggested a few rewordings for what's mainly existing content

explore-analyze/query-filter.md

explore-analyze/query-filter/languages.md

leemthompo · 2025-09-09T07:54:33Z

explore-analyze/query-filter/languages.md

-:::
-
+| **Query DSL** | {{es}}'s primary, most powerful and flexible JSON-style language for complex queries.<br><br>[Full language reference](elasticsearch://reference/query-languages/querydsl.md)| Full-text search, semantic search, keyword search, filtering, aggregations, and more. <br><br>[Query DSL in Kibana](languages/querydsl.md) |[`_search`](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-search) |
+| **{{esql}}** | Introduced in **8.11**, the Elasticsearch Query Language ({{esql}}) is a piped query language for filtering, transforming, and analyzing data.<br><br>[Full language reference](elasticsearch://reference/query-languages/esql.md) | Initially tailored towards working with time series data like logs and metrics. You can use {{esql}} in multiple {{kib}} applications for querying, visualizing, and analyzing data.<br><br>[{{esql}} in Kibana](languages/esql-kibana.md) | [`_query`](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-esql) |


good catch, that's dated, I suggested deleting that phrase :)

leemthompo · 2025-09-09T07:54:56Z

explore-analyze/query-filter/languages.md

+| **Query DSL** | {{es}}'s primary, most powerful and flexible JSON-style language for complex queries.<br><br>[Full language reference](elasticsearch://reference/query-languages/querydsl.md)| Full-text search, semantic search, keyword search, filtering, aggregations, and more. <br><br>[Query DSL in Kibana](languages/querydsl.md) |[`_search`](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-search) |
+| **{{esql}}** | Introduced in **8.11**, the Elasticsearch Query Language ({{esql}}) is a piped query language for filtering, transforming, and analyzing data.<br><br>[Full language reference](elasticsearch://reference/query-languages/esql.md) | Initially tailored towards working with time series data like logs and metrics. You can use {{esql}} in multiple {{kib}} applications for querying, visualizing, and analyzing data.<br><br>[{{esql}} in Kibana](languages/esql-kibana.md) | [`_query`](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-esql) |
+| **EQL** | Event Query Language (EQL) is a query language for event-based time series data. Data must contain the `@timestamp` field to use EQL.<br><br>[Full language reference](elasticsearch://reference/query-languages/eql.md) | Designed for the threat hunting security use case.<br><br>[EQL in Kibana](languages/eql.md) | [`_eql`](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-eql) |
+| **Elasticsearch SQL** | Allows native, real-time SQL-like querying against {{es}} data. JDBC and ODBC drivers are available for integration with business intelligence (BI) tools.<br><br>[Full language reference](elasticsearch://reference/query-languages/sql.md) | Query {{es}} data using a familiar SQL syntax for BI and reporting.<br><br>[Elasticsearch SQL in Kibana](languages/sql.md) | [`_sql`](https://www.elastic.co/docs/api/doc/elasticsearch/group/endpoint-sql) |


can you use SQL in Kibana somewhere? 🤷‍♂️

Yes

Yes, Elasticsearch SQL can be used in several other places within Kibana beyond Dev Tools and SQL Workbench:

Kibana Apps Supporting SQL

Discover
Use the KQL/Lucene toggle and switch to SQL mode
Write SQL queries directly in the search bar
Results display in the familiar Discover interface with filtering capabilities

Canvas
Use SQL as a data source for Canvas workpads
Create custom visualizations with SQL queries

Lens (Limited)
Some Lens visualizations can accept SQL-generated data
Primarily through saved queries that can be referenced

Dashboard Panels
Create dashboard panels using SQL queries through Canvas elements
Use SQL-based saved searches in dashboard visualizations

Left a comment on this issue #2563 (comment) to deal with this

leemthompo · 2025-09-09T08:05:40Z

explore-analyze/query-filter.md

+* **Searchable means that you can filter the documents for conditions.** For example, you can filter for data "within the last 7 days" or data that "contains the word {{kib}}". {{kib}} provides many ways for you to construct filters, which are also called queries or search terms.
+* **Aggregatable means that you can extract summaries from matching documents.** The simplest aggregation is **count**, and it is frequently used in combination with the **date histogram**, to see count over time. The **terms** aggregation shows the most frequent values.

 ## Querying


This might be out of scope, but I wonder if this section needs a little overhaul too given the focus in E&A is now Kib?

This section now feels a little disjointed:

talks about apis instead of defining what querying means

mixes kib and es concepts without clear separation

api-centric — emphasizes technical endpoints over actual query capabilities

omits how to query through kibana ui components

Yeah we haven't made a cut yet. Instead of making this page about Kibana, I rather think it should stay as is and move once we clean this up

Co-authored-by: Liam Thompson <leemthompo@gmail.com>

florent-leborgne · 2025-09-09T08:52:14Z

Looks good, my main concern is that the ## Querying section now suffers from a bit of focus mismatch between ES and Kib, but as mentioned in my comment maybe that's out of scope here :)

Yes that's intended for now. Once we have dealt with the deduplication of other language pages with the "Query languages" reference section, we can actually turn this specifically into "Query languages in Kibana". I think this needs to happen, but after some more cleanup planned with other issues.

Add more Kibana context to E&A Languages page

c8adec8

florent-leborgne requested review from a team as code owners September 8, 2025 16:57

florent-leborgne requested a review from leemthompo September 8, 2025 16:57

links

aaee771

benironside approved these changes Sep 8, 2025

View reviewed changes

leemthompo approved these changes Sep 9, 2025

View reviewed changes

florent-leborgne and others added 4 commits September 9, 2025 10:32

Update explore-analyze/query-filter.md

6d95cbb

Co-authored-by: Liam Thompson <leemthompo@gmail.com>

Update explore-analyze/query-filter.md

ec9f560

Co-authored-by: Liam Thompson <leemthompo@gmail.com>

Update explore-analyze/query-filter/languages.md

7ff93f8

Co-authored-by: Liam Thompson <leemthompo@gmail.com>

Update explore-analyze/query-filter/languages.md

b294a8e

Co-authored-by: Liam Thompson <leemthompo@gmail.com>

Merge branch 'main' into ea-languages

ee7db22

florent-leborgne merged commit 7e7f4d6 into elastic:main Sep 9, 2025
7 checks passed

florent-leborgne mentioned this pull request Sep 9, 2025

[Community]: Anchor link name conflict on #2845

Closed

Add more Kibana context to E&A Languages page #2859

Add more Kibana context to E&A Languages page #2859

Uh oh!

Conversation

florent-leborgne commented Sep 8, 2025

Uh oh!

github-actions bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Preview links for changed docs

Uh oh!

benironside left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

leemthompo left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

florent-leborgne commented Sep 9, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions bot commented Sep 8, 2025 •

edited

Loading